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Question: 1 


What does the Application Data Modeling module of the Oracle Data Masking and Subsetting Pack 
search for? 


A. data redaction policies 

B. data masking transformations 

C. parent/child relationships between the columns holding sensitive information 
D. encrypted columns 


Answer: C 


Explanation: 


Create an Application Data Model — To begin using Oracle Data Masking and Subsetting, you must 
create an Application Data Model (ADM). ADMs capture application metadata, referential 
relationships, and discover sensitive data from the source database. 
https://docs.oracle.com/database/121/DMKSB/intro.htm#:~:text=Create%20an%20Application%20 


Data%20Model,data%20from%20the%20source%20database. 


Question: 2 


Database Vault is configured and enabled in the database. You create a rule set to enforce security on 
the hr. employees table. 

Examine these requirements: 

1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES. 

2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES. 

3. Audit records are to be collected for every evaluation of the rule set. 

Which two options are true when creating the rule set? 


A. One rule set contains two rules OR'ed together. 

B. The rule set parameter audit_options must be set to dbms_macutl.g ruleset_audtt_fail. 

C. The rule set must be defined as is_ static. 

D. The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all. 

E. The rule set parameter audit_options must be set to dbms_macutl.g _buleset_audit_fail + DBMS 
MACUTL.G RULESET AUDIT SUCCESS. 


Answer: CD 


Explanation: 


Question: 3 
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To avoid hard coding passwords in scripts, you have elected to create an external password store- 
Examine this list of steps: 

1. Set the external password store wallet location. 

ALTER SYSTEM SET EXTERNAL_KEYSTORE_CREDENTIAL_LOCATION = 
"/etc/ORACLE/WALLETS/orcl/external_Btore" SCOPE c SPFILE; 

2. Log in as a user who has syskm privileges. 

3. Create an auto-login keystore that contains the keystore password including the add secret clause. 
ADMINISTER KEY MANAGEMENT ADD SECRET 'password' 

FOR CLIENT ‘TDE_WALLET' 

TO LOCAL AUTO_LOGIH KEYSTORE '/etc/ORACLE/WALLETS/orcl/extemal_store'; 

4. Restart the database instance as sysdba. 

SHUTDOWN IMMEDIATE STARTUP 

5. Create an auto-login keystore that contains the keystore password. 

ADMINISTER KEY MANAGEMENT 

FOR CLIENT 'TDE_WALLET' 

TO LOCAL AUTO_LOGIN KEYSTORE '/etc/ORACLE/WALLETS/orcl/external_store' ; 

6. Set an Encryption Key. 

ADMINISTER KEY MANAGEMENT SET ENCRYPTION KEY IDENTIFIED BY  keystore_password 
WITH BACKUP 

Identify the minimum number of steps in the correct order that must be performed to create the 
external password store. 


A. 2,1,3,4 
B. 1,2,5,4 
C. 1,2,3,6,4 
D. 1,2,6,3,5 
E. 2,3,6,4 
F. 1,2,3,4 


Answer: D 


Explanation: 


Question: 4 


Oracle Database Vault is enabled In the database. You have these requirements: 

1. Database administrator dbai must export and import data from and to a non-protected schema. 
2. Database administrator dba2 must export and Import data from and to a protected schema. 
Which three options together satisfy these requirements? 


A. Grant become user to dbai. 

B. Grant sysoper to both users. 

C. Run d3ms_macadm.authorize_datapump_user procedure granting dbai privileges to impdp and 
expdp utilities. 

D. Grant imp_full_ database and exp_full_ database to dbai and dba2. 

E. Run dbms_macadm.authobize_datapump_useb procedure granting dba2 privileges to impdp and 
expdp utilities. 

F. Grant become user to dba2. 
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G. Grant sysdba to both users. 


Answer: ACE 


Explanation: 


Question: 5 


You must restrict execution of the alter system checkpoint command to certain conditions, specified 
in a rule set used by a command rule. 

Which two parameters must be specified In the dbms_macadm.create_command_rule procedure to 
do this? 


A. PARAMETER_NAME£=>'CHECKPOINT' 
B. OBJECT_OWNER=>'SYS 

C. CLAUSE_NAME=>'CHECKPOINT' 

D. CLAUSE_NAME=>'SYSTEM' 

E. COMMANI>=>' ALTER SYSTEM' 

F. OBJECT_NAME=>'CHECKPOINT' 

G. COMMAND=>'ALTER' 


Answer: CD 


Explanation: 
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